pleroma/lib
Lain Soykaf 65076aa2f8
fix(http): reject Hackney's certifi partial chains
Hackney 4 merges given ssl_options into its defaults and keeps its own
partial_chain, which trusts any certificate in the peer chain that is in
certifi. A peer could send the emSign ECC Root CA - G3 root in its chain
and pass. Set partial_chain so certifi is never a trust anchor.
2026-10-22 10:05:12 +04:00
..
mix fix(config): keep search startup settings static 2026-07-26 11:58:31 +04:00
pleroma fix(http): reject Hackney's certifi partial chains 2026-10-22 10:05:12 +04:00